-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.keycloak:keycloak-services | maven | < 21.1.2 | 21.1.2 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from the certificate chain validation logic in authenticateClient(). The original code used Arrays.stream(certs) to check all certificates in the chain against the configured subject DN (via either regex or exact match). The security fix changed this to only check certs[0] (the client certificate). The commit message, CWE-295 mapping, and test case updates confirming 'certificate chain position matters' all corroborate that this was the vulnerable function.
Ongoing coverage of React2Shell